add unsigned Auth API for Geoserver; split API views from SSO views from registration views; refactored URLs a bit;